Safe network authentication system and method

Abstract

The invention adopts a safe network authentication system and a method thereof, which are used for solving the problems of security and convenience for internet users to login network resource. In the method of the invention, the users must go through the authentication of an agent and then pass the authentication of service suppliers. The method has the advantages of safety, high efficiency and convenience.

Description

technical field [0001] The invention relates to a secure network authentication system and method. Background technique [0002] The number of resources and services provided by the Internet is huge and growing rapidly. The Internet has become the main channel for people to obtain information resources and information services. Many online resources and services require users to log in and verify. However, the user's login information on different websites It is difficult to remember and there is a problem that the security is too low. [0003] At present, there is a solution to achieve centralized and unified authentication on the portal through the cookie technology of standard browsers, but there are great defects. First, in this scheme, users only need to authenticate once on the portal to access all resource sites in the scheme. In this way, during the storage period of the cookie, other people can use the same computer with the user's authority Accessing resource sit...

AI Technical Summary

Problems solved by technology

First, in this scheme, users only need to authenticate once on the portal to access all resource sites in the scheme. In this way, during the storage period of the cookie, other people can use the same computer with the user's authority Accessing resource sites, the security risk is greater if the user uses a public computer or someone else's computer (for example, an Internet cafe or a colleague's computer)

Second, standard browsers and cookie technology have limitations and defects when they are used to store this important authentication information. For example, cookies are disabled in some applications, and cookies have capacity limitations in various browsers. Standard browsing Devices and cookies cannot automatically read removable peripherals, etc.

This solution has many disadvantages, for example: first, users need to record their usernames and passwords registered at each resource site in the portal, so that users can assign all their permissions on the resource site to the portal, and the resource sites cannot distinguish Users and portals also lose the security guarantee for user rights. Secondly, portal sites log in to resource sites with fixed user names and passwords, and there are also great security risks.

[0005] In addition, the method of transferring IP addresses through the server widely used in the establishment of P2P connections in instant messaging conversations cannot be applied in some NAT situations, and the IP address transfer cannot be safely verified on the service side

Images